Welcome

Plagues

A fully local, zero-trust system that splits every privileged operation into isolated, self-defending agents so a single breach doesn't mean death.

The Plagues Protocol is the ultra-minimalist, zero-trust local RPC protocol that powers every single interaction inside the XRUIOS (Our Cross Platform Framework/OS/Abstraction Layer).

Windows • Linux • Easy To Add Platforms • Fully Offline • Post Quantum Computing Resistant • No BS

How it works

The Plagues Protocol enforces a cryptographically-sealed boundary on the same machine between:

  • Untrusted side – your shell, apps, plugins (running as the logged-in user)
  • Trusted side – tiny, manifest-protected workers running as SYSTEM/root

All communication uses MagicOnion over OS-local channels (named pipes / Unix sockets) for zero-copy performance and zero network exposure.

Trusted workers:

  • Verify their own executable and DLLs against a Kyber-signed manifest (Blake3 hashes) before listening
  • Refuse to run if tampered
  • Require no discovery, no TLS, no handshake — if you can open the pipe and the worker self-verified, the call is allowed

Result: Even a complete userland compromise cannot escalate or exfiltrate privileged data.

“A single breach can never conquer the machine.”


WalkerDev Kennaness
Code by WalkerDev
“Loving coding is the same as hating yourself”
Discord
Art by Kennaness
“When will I get my isekai?”
BlueskyArtStation

What's In Here

Focus Description
Worker.cs A Windows Specific Service Worker Example
Worker.cs A Linux Specific Service Worker Example
PublicAcc.cs The MagicOnion Server Interface And Definitions Shared Between Linux/Windows Workers
Accounts.cs The Windows specific function for getting the data from the Service Worker
Accounts.cs The Linux specific function for getting the data from the Service Worker
Core.cs Where code cross platform by default goes + the XRUIOS.Windows or Linux
Program.cs A CMD Test Of The XRUIOS.Core

Full overview → 1. Design Philosophy


Using The System

//The Base DLL (Ensure you also have all other DLLs for your OS at minimum)
//Also Shared References Between OSes

using XRUIOS.Core;
using XRUIOS.Interfaces;
//We assume the worker "XRUIOS.Windows.PublicAccountDataHandler" was launched already at start, which should have resulted in the address "worker_addr" being populated with the API endpoint we want to 

//If the worker address is not exist, you can wait for it to be set but for now we handle the exception
var clientAddr = Utils.SecureStore.Get<string>("worker_addr");
if (clientAddr == null)
{
    throw new Exception("Worker address not found in secure storage.");
}
//Take the resulting address and setup an Onion Client

using var channel = Grpc.Net.Client.GrpcChannel.ForAddress(clientAddr);
var client = MagicOnion.Client.MagicOnionClient.Create<XRUIOS.Interfaces.IPublicAcc>(channel);
//Get the resulting data and ensure it shows something
var result = await client.GetAccInfo(Environment.UserName);

Console.Write(result);

Console.WriteLine($"Name: {result.Name}");
Console.WriteLine($"Folder: {result.OSFolder}");
Console.WriteLine($"Checked: {result.LastCheck}");

Want to understand how to make your own services? Check Out 1. Setup The Plagues Protocol


Other Services

Interested in using Secure Store but not so excited for Plagues Protocol?
We separated Secure Store into it's own .DLL!

Check It Here

License & Artwork

Code: NON-AI MPL 2.0
Artwork: © Kennaness — NO AI training. NO reproduction. NO exceptions.

Unauthorized use of the artwork — including but not limited to copying, distribution, modification, or inclusion in any machine-learning training dataset — is strictly prohibited and will be prosecuted to the fullest extent of the law.